high7.5
CVE-2022-34147
Improper input validation in BIOS firmware for some Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performance Kits, Intel(R) NUC Performance Mini PC, Intel(…
Impact
Improper input validation in BIOS firmware for some Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performance Kits, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, and Intel(R) NUC Compute Element may allow a privileged user to potentially enable escalation of privilege via local access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Lapqc71a Firmware | before qccfl357.0158 |
| Intel | Lapqc71b Firmware | before qccfl357.0158 |
| Intel | Lapqc71c Firmware | before qccfl357.0158 |
| Intel | Lapqc71d Firmware | before qccfl357.0158 |
| Intel | Nuc10i3fnh Firmware | before fncml357.0059 |
| Intel | Nuc10i3fnhf Firmware | before fncml357.0059 |
| Intel | Nuc10i3fnhfa Firmware | before fncml357.0059 |
| Intel | Nuc10i3fnhja Firmware | before fncml357.0059 |
| Intel | Nuc10i3fnhn Firmware | before fncml357.0059 |
| Intel | Nuc10i3fnk Firmware | before fncml357.0059 |
| Intel | Nuc10i3fnkn Firmware | before fncml357.0059 |
| Intel | Nuc10i5fnh Firmware | before fncml357.0059 |